Manuals
/
Nokia
/
Cell Phone
/
Cell Phone
Nokia
IPSO 4.0
manual
478
Models:
IPSO 4.0
1
478
510
510
Download
510 pages
5.58 Kb
475
476
477
478
479
480
481
482
<
>
Troubleshooting
Install
Error codes
Password
Preference Default
Configuring RIP Timers
Interface Status Indicators
Cluster Administrator Users
Configuring System Functions
Managing Security and Access
Page 478
Image 478
11
478
Nokia Network Voyager for IPSO 4.0 Reference Guide
Page 477
Page 479
Page 478
Image 478
Page 477
Page 479
Contents
Nokia Network Voyager For Ipso Reference Guide
Nokia Network Voyager for Ipso 4.0 Reference Guide
Restricted Rights Legend
Https//support.nokia.com Tac.support@nokia.com
Nokia Network Voyager for Ipso 4.0 Reference Guide
Contents
Nokia Network Voyager Ipso 4.0 Reference Guide
Configuring System Functions
Nokia Network Voyager Ipso 4.0 Reference Guide
Configuring Clustering
Virtual Router Redundancy Protocol Vrrp
Nokia Network Voyager Ipso 4.0 Reference Guide
Configuring Snmp
Configuring IPv6
Managing Security and Access
Configuring Routing
Nokia Network Voyager Ipso 4.0 Reference Guide
Nokia Network Voyager Ipso 4.0 Reference Guide
Configuring Traffic Management
Configuring Router Services
Monitoring System Configuration and Hardware
Index
About the Nokia Network Voyager Reference Guide
About the Nokia Network Voyager Reference Guide
Text Conventions
Conventions This Guide Uses
Text Conventions
Convention Description
Related Documentation
Menu Items
Software Overview
Nokia Network Voyager for Ipso 4.0 Reference Guide
Logging Off
Logging In to Network Voyager
To open Nokia Network Voyager
To log in without exclusive configuration lock
Obtaining a Configuration Lock
To log in with exclusive configuration lock
To override a configuration lock
Reloading Pages
Accessing Documentation and Help
Navigating in Network Voyager
To clear the memory and disk cache
„ Nokia support site https//support.nokia.com
To open a new window to view help
Viewing Hardware and Software Information for Your System
To view the asset management summary
Configuring Interfaces
Interface Overview
IP2250 Management Ports
Configuring Network Devices
Type Prefix
Configuring IP Addresses
Physical Interface Logical Interface
Interface Status
Interface Status Indicators
Configuring Tunnel Interfaces
Indicator Description
Ethernet Interfaces
Configuring Ethernet Interfaces
Physical Interface Configuration Parameters
Parameter Description
To configure an Ethernet interface
Link Aggregation
Managing Link Aggregation Using Snmp
Configuring Switches for Link Aggregation
Link Aggregation on the IP2250
Static Link Aggregation
Firewall Synchronization Traffic
Configuring the Remaining Management Ports
Production Traffic ADP I/O Ports Only
To set up link aggregation in Network Voyager
Configuring Link Aggregation
Physical Interface Configuration
To physically configure the interfaces you will aggregate
Group Configuration
To configure link aggregation groups
Deleting Aggregation Groups
Logical Configuration
Gigabit Ethernet Interfaces
Gigabit Ethernet Interface Parameters
To configure a Gigabit Ethernet interface
MTU
To configure PPPoE
Configuring PPPoE
Point-to-Point Over Ethernet
Nokia Network Voyager for Ipso 4.0 Reference Guide
To create PPPoE logical interfaces
To change configuration profiles
To delete configuration profiles
To delete PPPoE logical interfaces
Configuring MSS Clamping
Virtual LAN Interfaces
To configure a Vlan Interface
To delete a Vlan Interface
Vlan Example Topology
To define the maximum number of VLANs
To configure an Fddi Interface
Fddi Interfaces
To change the duplex setting of an Fddi interface
To change the IP address of an Fddi interface
To configure an Isdn physical interface
Isdn Interfaces
To configure an Isdn logical interface to place calls
Nokia Network Voyager for Ipso 4.0 Reference Guide
Nokia Network Voyager for Ipso 4.0 Reference Guide
To configure an Isdn interface to receive calls
Configuring Calling Line-Identification Screening
To add an incoming number
To configure an interface to place and receive calls
To remove an incoming number
Dial-on-Demand Routing DDR Lists
To delete a DDR list
To create a DDR list
To add a new rule to a DDR list
To modify a rule
Example DDR List
To apply or remove a DDR list to/from an interface
Isdn Network Configuration Example
To configure the IP330 to place an outgoing call
To configure the IP650 to handle an incoming call
Sample Call Traces
Trace for connecting a call from the Nokia IP330 is
To set level of messages logged
Isdn Troubleshooting
Logging
To view the message log
Tracing
Troubleshooting Cause Codes
To trace Isdn traffic using tcpdump
Isdn Cause Code Fields
Isdn Cause Values
Cause Cause Description Diagnostics
Cause Values
See Isdn Cause Values table
Information-element identifiers is missing
Isdn Bearer-Capable Values
Value Description
To configure a Token Ring interface
Token Ring Interfaces
To deactivate a Token Ring interface
To change a Token Ring interface
Token Ring Example
Fddi
To configure an ATM interface
Point-to-Point Link over ATM
To change the VPI/VCI of an ATM interface
To change the IP Address of an ATM interface
To change the IP MTU of an ATM interface
ATM Example
Fddi
To configure an ATM logical IP subnet LIS interface
To configure the ATM interface on Nokia Platform a
IP over ATM IPoA
To change the VPI/VCIs of an ATM LIS Interface
To change the IP Address of an ATM LIS interface
IPoA Example
ATM
To configure a serial interface for Cisco Hdlc
Serial V.35 and X.21 Interfaces
To configure a Serial Interface for PPP
To configure a serial interface for frame relay
Nokia Network Voyager for Ipso 4.0 Reference Guide
Serial Interface Example
To configure a T1 Interface for Cisco Hdlc
To configure the serial interface on Nokia Platform a
T1with Built-In CSU/DSU Interfaces
Nokia Network Voyager for Ipso 4.0 Reference Guide
To configure a T1 Interface for PPP
Nokia Network Voyager for Ipso 4.0 Reference Guide
To configure a T1 interface for frame relay
Nokia Network Voyager for Ipso 4.0 Reference Guide
T1 Interface Example
To configure the serial interface on Nokia Platform a
To configure an E1 interface for Cisco Hdlc
E1 with Built-In CSU/DSU Interfaces
Nokia Network Voyager for Ipso 4.0 Reference Guide
To configure an E1 interface for PPP
Nokia Network Voyager for Ipso 4.0 Reference Guide
To configure an E1 interface for frame relay
100
Nokia Network Voyager for Ipso 4.0 Reference Guide 101
102
Hssi Interfaces
To configure an Hssi interface for Cisco Hdlc
Nokia Network Voyager for Ipso 4.0 Reference Guide 103
To configure an Hssi interface for PPP
104
To configure an Hssi interface for frame relay
Nokia Network Voyager for Ipso 4.0 Reference Guide 105
106
Unnumbered Interfaces
Configuring Unnumbered Interfaces
To configure an unnumbered interface
Nokia Network Voyager for Ipso 4.0 Reference Guide 107
To change an unnumbered interface to a numbered interface
108
To configure a static route over an unnumbered interface
Nokia Network Voyager for Ipso 4.0 Reference Guide 109
Ospf over Unnumbered Interfaces Using Virtual Links
Configuring Ospf over Unnumbered Interface
110
To change the keepalive interval for Cisco Hdlc
Cisco Hdlc Protocol
Nokia Network Voyager for Ipso 4.0 Reference Guide 111
To change the keepalive interval in PPP
Point-to-Point Protocol
To change the IP address in Cisco Hdlc
112
To change the IP address in PPP
To change the keepalive maximum failures in PPP
Nokia Network Voyager for Ipso 4.0 Reference Guide 113
To change the Dlci in frame relay
Frame Relay Protocol
To change the keepalive interval in frame relay
114
To change the interface type in frame relay
To change the LMI parameters in frame relay
Nokia Network Voyager for Ipso 4.0 Reference Guide 115
To remove a frame relay interface
To change the active status monitor setting in frame relay
To change the IP address in frame relay
116
To change the IP Address of a loopback interface
Loopback Interfaces
To add an IP Address to a Loopback Interface
Nokia Network Voyager for Ipso 4.0 Reference Guide 117
To create a GRE tunnel
Configuring GRE Tunnels
GRE Tunnels
118
Nokia Network Voyager for Ipso 4.0 Reference Guide 119
To change IP TOS value of a GRE tunnel
120
GRE Tunnel Example
Nokia Network Voyager for Ipso 4.0 Reference Guide 121
HA GRE Tunnel Example
High Availability GRE Tunnels
122
Nokia Network Voyager for Ipso 4.0 Reference Guide 123
124
To create a Dvmrp tunnel
Dvmrp Tunnels
Nokia Network Voyager for Ipso 4.0 Reference Guide 125
To change the local or remote addresses of a Dvmrp tunnel
Dvmrp Tunnel Example
126
Nokia Network Voyager for Ipso 4.0 Reference Guide 127
To change ARP global parameters
ARP Table Entries
128
To add a proxy ARP entry
To add a static ARP entry
Nokia Network Voyager for Ipso 4.0 Reference Guide 129
Configuring ARP for ATM Interfaces
To view and delete dynamic ATM ARP entries
To add a static ATM ARP entry
To delete a static ATM ARP entry
Nokia Network Voyager for Ipso 4.0 Reference Guide 131
Limitations
Transparent Mode
132
Transparent Mode Processing Details
Nokia Network Voyager for Ipso 4.0 Reference Guide 133
Configuring Transparent Mode in VPN Environments
134
Example of Transparent Mode
Nokia Network Voyager for Ipso 4.0 Reference Guide 135
Configuring Transparent Mode
136
To delete a transparent mode group
Creating and Deleting Transparent Mode Groups
To create a transparent mode group
Nokia Network Voyager for Ipso 4.0 Reference Guide 137
To enable or disable a transparent mode group
Enabling or Disabling a Transparent Mode Group
138
Enabling or Disabling Vrrp for a Transparent Mode Group
Monitoring Transparent Mode Groups
Transparent Mode and Check Point NGX
Configuring Antispoofing
Routing Traffic through the VTI
Virtual Tunnel Interfaces Fwvpn for Route-Based VPN
Unnumbered VTIs
140
Nokia Network Voyager for Ipso 4.0 Reference Guide 141
To create a virtual tunnel interface
Creating Virtual Tunnel Interfaces
Vrrp Support
To create the VPN community
Nokia Network Voyager for Ipso 4.0 Reference Guide 143
To create the virtual tunnel interface
144
Configuring Dhcp
Nokia Network Voyager for Ipso 4.0 Reference Guide 145
To configure the Dhcp client interface
Configuring Dhcp Client Interfaces
Dhcp Client Configuration
To enable the Dhcp client process
To configure the Dhcp server process
Configuring the Dhcp Server
Nokia Network Voyager for Ipso 4.0 Reference Guide 147
To enable the Dhcp server process
Dhcp Server Configuration
148
To change the Dhcp service
Changing Dhcp Service
To disable the Dhcp server process
Adding Dhcp Address Pools
Assigning a Fixed-IP Address to a Client
To enable and existing IP address pool
Enabling or Disabling Dhcp Address Pools
To assign a fixed-IP address to a client
Creating Dhcp Client Templates
Nokia Network Voyager for Ipso 4.0 Reference Guide 151
152
To configure Dynamic Domain Name System Ddns
Configuring Dynamic Domain Name System Service
Configuring Dynamic Domain Name System Zones
Nokia Network Voyager for Ipso 4.0 Reference Guide 153
To configure DNS
Configuring the Domain Name Service
Configuring Disk Mirroring
To create a mirror set
To delete a mirror set
Using an Optional Disk Flash-Based Systems Only
Nokia Network Voyager for Ipso 4.0 Reference Guide 155
Mail Relay
To install and configure PC card flash memory
To configure the system to store log files on the PC card
To remove an optional disk
To configure mail relay for your firewall
Configuring Mail Relay
To configure failure notification
System Failure Notification
To send mail from the firewall
Setting the System Time
Sending Mail
158
To add a static host entry
Configuring Host Addresses
To set system time once
Nokia Network Voyager for Ipso 4.0 Reference Guide 159
Accepting Log Messages
Configuring System Logging
Configuring Logging on Disk-Based Systems
Logging to a Remote System
To send syslog messages to a remote system
Configuring Logging on Flash-Based Systems
Nokia Network Voyager for Ipso 4.0 Reference Guide 161
Configuring Logging to Remote Log Servers
162
Configuring Logging to an Optional Disk
Configuring Audit Logs
Nokia Network Voyager for Ipso 4.0 Reference Guide 163
To set the system configuration audit log
164
Remote Core Dump Server on Flash-Based Systems
Nokia Network Voyager for Ipso 4.0 Reference Guide 165
To change the hostname
Managing Configuration Sets
Changing the Hostname
166
To delete unwanted configuration database files
To create a factory default configuration file
To switch a currently active database
Scheduling Jobs
To delete scheduled jobs
Backing Up and Restoring Files
168
To delete local backup files
Creating Backup Files
To create a backup file manually
Nokia Network Voyager for Ipso 4.0 Reference Guide 169
To configure scheduled backups
Transferring Backup Files
Configuring Automatic Transfers
To cancel a regularly scheduled backup
To manually transfer archive files to a remote server
Transferring Backup Files Manually
Nokia Network Voyager for Ipso 4.0 Reference Guide 171
To restore files
Restoring Files from Locally Stored Backup Files
172
Deleting Images
Managing Nokia Ipso Images
Changing Current Image
To select a new current image
To delete an Nokia Ipso image
Installing New Images
174
To test an image before activating it
Testing a New Image
Nokia Network Voyager for Ipso 4.0 Reference Guide 175
Downgrading Nokia Ipso Images
Rebooting a Cluster
Upgrading Nokia Ipso Images for a Cluster
176
Configuring Monitor Reports
Nokia Network Voyager for Ipso 4.0 Reference Guide 177
Restrictions for Flash-Based Platforms
Installing and Enabling Packages
Managing Packages
Monitor Report Parameters
To install a package
Nokia Network Voyager for Ipso 4.0 Reference Guide 179
To enable or disable a package
Advanced System Tuning
Tuning the TCP/IP Stack
To delete a package
To set the TCP MSS
Router Alert IP Option
Nokia Network Voyager for Ipso 4.0 Reference Guide 181
182
How Vrrp Works
Vrrp Overview
Nokia Network Voyager for Ipso 4.0 Reference Guide 183
Simple Vrrp Configuration
184
Vrrp Configuration with Internal and External VRIDs
Vrrp Configuration with Simultaneous Backup
Understanding Monitored-Circuit Vrrp
Configuring Vrrp
186
Priority
Selecting Configuration Parameters
Nokia Network Voyager for Ipso 4.0 Reference Guide 187
Hello Interval
Authentication
188
Priority Delta
Backup Address
Nokia Network Voyager for Ipso 4.0 Reference Guide 189
Vmac Mode
190
Before you Begin
Global Vrrp Settings
Vrrp Configuration Parameters
Nokia Network Voyager for Ipso 4.0 Reference Guide 191
Configuring Monitored-Circuit Vrrp
192
To add a virtual router
Nokia Network Voyager for Ipso 4.0 Reference Guide 193
To delete a virtual router
Configuring Monitored-Circuit Vrrp using the Full Method
To change the configuration of an existing virtual router
194
Additional Vrrp Parameters Used in Full Method
Nokia Network Voyager for Ipso 4.0 Reference Guide 195
To add or back up a virtual router using VRRPv2
Configuring VRRPv2
196
Configuring Check Point NGX for Vrrp
Nokia Network Voyager for Ipso 4.0 Reference Guide 197
Configure settings under the 3rd party configuration tab
198
Configuration Rule for Check Point NGX FP1
Configuring Vrrp Rules for Check Point NGX
Nokia Network Voyager for Ipso 4.0 Reference Guide 199
Source Destination Service Action
Configuration Rules for Check Point NGX FP2 and Later
Configuring Rules if You Are Using Ospf or Dvmrp
200
Link Aggregation IP2250 Systems Only
CLI commands for Vrrp
Monitoring Vrrp
State
Stats
Location
202
To enable or disable Monitor Firewall state
Troubleshooting Vrrp
General Configuration Considerations
To enable traces for Vrrp
Firewall Policies
Access Control Lists
204
VRRPv2 in Switched Environments
Switched Environments
Monitored-Circuit Vrrp in Switched Environments
Nokia Network Voyager for Ipso 4.0 Reference Guide 205
206
IP Clustering Description
Using Flash-Based Platforms
Nokia Network Voyager for Ipso 4.0 Reference Guide 207
Example Cluster
208
Cluster Management
Nokia Network Voyager for Ipso 4.0 Reference Guide 209
Cluster Terminology
210
Cluster member a cluster node that is not the master
Nokia Network Voyager for Ipso 4.0 Reference Guide 211
Clustering Modes
212
Nokia Network Voyager for Ipso 4.0 Reference Guide 213
Network Environment
Considerations for Clustering
214
Other Considerations
Nokia Network Voyager for Ipso 4.0 Reference Guide 215
Clustering IP2250 Platforms
216
Upgrading Ipso in a Cluster
Nokia Network Voyager for Ipso 4.0 Reference Guide 217
Upgrading from Ipso
For All Upgrades
Upgrading from Ipso 3.7 or Later
218
Enabling Cluster Management
Nokia Network Voyager for Ipso 4.0 Reference Guide 219
To create and configure a cluster
Creating and Configuring a Cluster
Configuration Overview
Creating a Cluster
Configuring the Work Assignment Method
Selecting the Cluster Mode
Nokia Network Voyager for Ipso 4.0 Reference Guide 221
To include an interface in the cluster
Configuring an Interface
222
Supporting Non-Check Point Gateways and Clients
Configuring Firewall Monitoring
Nokia Network Voyager for Ipso 4.0 Reference Guide 223
Using IP Pools
Configuring VPN Tunnels
224
Using IP Pools When Only Check Point Gateways Are Involved
Nokia Network Voyager for Ipso 4.0 Reference Guide 225
Configuring IP pools in Cluster Voyager
Configuring Join-Time Shared Features
226
What if Settings Conflict?
What is Sharable?
Nokia Network Voyager for Ipso 4.0 Reference Guide 227
Configuring Features for Sharing
228
After You Create a Cluster
Adding a Node to a Cluster
Making the Cluster Active
Nokia Network Voyager for Ipso 4.0 Reference Guide 229
Recommended Procedure
230
Joining a System to a Cluster
Managing a Cluster
Nokia Network Voyager for Ipso 4.0 Reference Guide 231
To start Cluster Voyager
Using Cluster Voyager
232
Cluster Administrator Users
If You Forget the cadmin Password
Nokia Network Voyager for Ipso 4.0 Reference Guide 233
Monitoring a Cluster
Configuring the Failure Interval
Configuring the Performance Rating
234
Managing Join-Time Shared Features
Nokia Network Voyager for Ipso 4.0 Reference Guide 235
Installing Ipso Images
236
Nokia Network Voyager for Ipso 4.0 Reference Guide 237
Removing a Node from a Cluster
238
Synchronizing the Time on Cluster Nodes
Changing Cluster Interface Configurations
Deleting a Cluster Configuration
Assigning the Time Zone
NTP Server Outside the Cluster
Configuring NTP
240
Using the Master Node as the NTP Server
Configuring NGX for Clustering
Nokia Network Voyager for Ipso 4.0 Reference Guide 241
242
Clustering Example Three Nodes
Nokia Network Voyager for Ipso 4.0 Reference Guide 243
Configuring the Cluster in Voyager
244
Configuring the Internal and External Routers
Nokia Network Voyager for Ipso 4.0 Reference Guide 245
Clustering Example With Non-Check Point VPN
246
Nokia Network Voyager for Ipso 4.0 Reference Guide 247
248
Snmp Overview
Nokia Network Voyager for Ipso 4.0 Reference Guide 249
250
Source Function
Nokia Network Voyager for Ipso 4.0 Reference Guide 251
UDP-MIB
Snmp Proxy Support for Check Point MIB
252
Using cpsnmpstart
Using the Check Point MIB
Nokia Network Voyager for Ipso 4.0 Reference Guide 253
Enabling Snmp and Selecting the Version
To enable or disable Snmp
254
To set an Snmp agent address
Configuring the System for Snmp
Setting an Agent Address
Nokia Network Voyager for Ipso 4.0 Reference Guide 255
256
Configuring Traps
Types of Snmp Traps
Type of Trap Description
Nokia Network Voyager for Ipso 4.0 Reference Guide 257
258
Setting the Trap PDU Agent Address
Configuring Trap Receivers
Enabling or Disabling Trap Types
To configure location and contact information
Interpreting Error Messages
Configuring Location and Contact Information
Error status code Meaning
Variable-bindings Element Description
GetRequest
Nokia Network Voyager for Ipso 4.0 Reference Guide 261
Value Field Set Description
GetBulkRequest
Configuring SNMPv3
GetNextRequest
262
Security Related Options Used in Request Messages
Request Messages
Managing Snmp Users
Nokia Network Voyager for Ipso 4.0 Reference Guide 263
To add an Snmp user
264
To delete a USM user
Nokia Network Voyager for Ipso 4.0 Reference Guide 265
266
IPv6 Overview
Nokia Network Voyager for Ipso 4.0 Reference Guide 267
Interfaces
To configure IPv6 logical interfaces
268
To delete an IPv6 address
To disable IPv6 on an interface
To configure neighbor discovery
Nokia Network Voyager for Ipso 4.0 Reference Guide 269
IPv6 and IPv4 Compatibility
Configuring IPv6 in IPv4 Tunnels
To configure IPv6 in IPv4 tunnels
270
To configure IPv6 to IPv4
Configuring IPv6 to IPv4
Configuring IPv6 over IPv4
To configure IPv6 over IPv4
To configure IPv4 in IPv6 tunnels
Configuring IPv4 in IPv6 Tunnels
Configuring an IPv6 Default or Static Route
To configure an IPv6 default or static route
Configuring RIPng
Routing Configuration
Configuring OSPFv3
Creating IPv6 Aggregate Routes
Redistributing Aggregate Routes in RIPng
Creating Redistributed Routes
Redistributing Static Routes into RIPng
274
Redistributing Interface Routes into RIPng
Configuring ICMPv6 Router Discovery
Router Discovery
Nokia Network Voyager for Ipso 4.0 Reference Guide 275
276
Vrrp for IPv6
Configuring Vrrp for IPv6
Nokia Network Voyager for Ipso 4.0 Reference Guide 277
Creating a Virtual Router for an IPv6 Interface Using VRRPv3
278
Nokia Network Voyager for Ipso 4.0 Reference Guide 279
To set the virtual MAC address
Setting a Virtual MAC Address for a Virtual Router
280
Removing a Virtual Router in VRRPv3
Changing the IP Address List of a Virtual Router in VRRPv3
Nokia Network Voyager for Ipso 4.0 Reference Guide 281
Creating a Virtual Router in Monitored Circuit Mode for IPv6
282
Nokia Network Voyager for Ipso 4.0 Reference Guide 283
Traffic Management
284
To enable FTP, TFTP, or Telnet access
Security and Access Configuration
Nokia Network Voyager for Ipso 4.0 Reference Guide 285
286
To change the current user’s password
Managing Passwords
Nokia Network Voyager for Ipso 4.0 Reference Guide 287
Managing User Accounts
To change another user’s password
288
Nokia Network Voyager for Ipso 4.0 Reference Guide 289
Adding and Deleting Users
User Account Attributes
Attribute Description
To remove a user
Managing and Using S/Key
To add a user
290
To use the S/Key
Using S/Key
To configure S/Key
Nokia Network Voyager for Ipso 4.0 Reference Guide 291
Disabling S/Key
To disable S/Key
Managing Groups
292
To add or edit a group
Role-Based Administration
Nokia Network Voyager for Ipso 4.0 Reference Guide 293
To add or edit a role
Managing Roles
294
To delete a role
Assigning Roles and Access Mechanisms to Users
To assign roles and access mechanisms to users
Nokia Network Voyager for Ipso 4.0 Reference Guide 295
Creating Cluster Administrator Users
296
Network Services
Configuring Network Access and Services
Network Access Configuration Options
Service Description
Modem Configuration Parameters
Configuring a Modem on COM2, COM3, or COM4
To enable network access options and services
298
To configure a modem on COM2, COM3, or COM4
Nokia Network Voyager for Ipso 4.0 Reference Guide 299
Country Codes for Ositech Five of Clubs Card II
Configuring Nokia Network Voyager Access
Country Codes for Ositech Five of Clubs Card
300
To configure Web access for Nokia Network Voyager
Configuring Basic Nokia Network Voyager Options
Nokia Network Voyager for Ipso 4.0 Reference Guide 301
To generate a certificate and its associated private key
Generating and Installing SSL/TLS Certificates
Generating an SSL/TLS Certificate and Keys
302
To install the certificate and its associated private key
Installing the SSL/TLS Certificate
Nokia Network Voyager for Ipso 4.0 Reference Guide 303
Secure Shell SSH
Troubleshooting SSL/TLS Configuration
304
To configure SSH
Initial SSH Configuration
Nokia Network Voyager for Ipso 4.0 Reference Guide 305
To configure advanced options
Configuring Advanced Options for SSH
306
Nokia Network Voyager for Ipso 4.0 Reference Guide 307
Configuring Secure Shell Authorized Keys
308
Changing Secure Shell Key Pairs
To configure authorized keys
To configure key pairs
Nokia Network Voyager for Ipso 4.0 Reference Guide 309
To manage user identities
Managing User RSA and DSA Identities
310
To tunnel Http over SSH
Network Voyager Session Management
Tunneling Http Over SSH
Nokia Network Voyager for Ipso 4.0 Reference Guide 311
To set the session timeout interval
Configuring Session Timeouts
To enable or disable session management
Enabling Enabling or Disabling Session Management
To create an AAA configuration
Authentication, Authorization, and Accounting AAA
Creating an AAA Configuration
Nokia Network Voyager for Ipso 4.0 Reference Guide 313
Creating a Service Profile
Creating a Service Module Entry
Creating an Authentication Profile
Nokia Network Voyager for Ipso 4.0 Reference Guide 315
Authentication Profile Types
Type Module Description
To create an account profile
Creating an Accounting Profile
316
317
318
Creating a Service Module Example
Profile Controls
Control Description
Service Auth. Mgmt Acct. Mgmt Session Mgmt
Configuring Radius
Nokia Network Voyager for Ipso 4.0 Reference Guide 319
320
Configuring TACACS+
Nokia Network Voyager for Ipso 4.0 Reference Guide 321
To delete an authentication server
Deleting an AAA Authentication Server Configuration
322
To change an AAA configuration
Changing an AAA Configuration
Changing the Service Profile
To add an authentication profile
Service Authentication Management
Creating a Stacked Service Module
324
To add an accounting profile
Changing a Service Module Configuration
Changing an Authentication Profile Configuration
To add a session profile
Changing a Session Profile Configuration
Changing an Accounting Profile Configuration
326
To delete an AAA configuration
Deleting an AAA Configuration
Deleting an Item in a Service Profile Entry
Encryption Acceleration
Enabling Encryption Accelerator Cards
To enable the card for a Check Point VPN
IPSec Tunnels Ipso Implementation
Monitoring Cryptographic Acceleration
Transport and Tunnel Modes
Nokia Network Voyager for Ipso 4.0 Reference Guide 329
Protocol Negotiation and Key Management
Building VPN on ESP
330
Nokia Network Voyager for Ipso 4.0 Reference Guide 331
IPSec RFCs
Using PKI
IPSec Implementation in Ipso
332
Miscellaneous Tunnel Requirements
Nokia Network Voyager for Ipso 4.0 Reference Guide 333
Platform Support
Phase 1 Configuration
IPSec Parameters
334
Creating an IPSec Policy
Choosing IPv4 or IPv6 General Configuration
To chose IPv4 or IPv6 general configuration pages
Nokia Network Voyager for Ipso 4.0 Reference Guide 335
To select a trusted CA certificate
Proposal and Filters
Trusted CA Certificates
336
Device Certificates
Nokia Network Voyager for Ipso 4.0 Reference Guide 337
To enroll and install a device certificate
338
Advanced IPSec
Nokia Network Voyager for Ipso 4.0 Reference Guide 339
To complete creating an IPSec policy
Putting It All Together
340
To create an IPSec tunnel rule
Creating an IPSec Tunnel Rule
Nokia Network Voyager for Ipso 4.0 Reference Guide 341
To create a transport rule
Transport Rule
342
Nokia Network Voyager for Ipso 4.0 Reference Guide 343
IPSec Tunnel Rule Example
To configure Nokia Platform
344
Nokia Network Voyager for Ipso 4.0 Reference Guide 345
IPSec Transport Rule Example
Configure Nokia Platform
To configure Nokia Platform 1 Ipso
346
Nokia Network Voyager for Ipso 4.0 Reference Guide 347
To remove an IPSec tunnel
Configure PC1
Removing an IPSec Tunnel
348
To set TCP flag combinations
Miscellaneous Security Settings
Nokia Network Voyager for Ipso 4.0 Reference Guide 349
350
Routing Protocols
Routing Overview
Nokia Network Voyager for Ipso 4.0 Reference Guide 351
RIP
352
Route Maps
Nokia Network Voyager for Ipso 4.0 Reference Guide 353
Types of Areas
354
High Availability Support for Ospf
Area Border Routers
Nokia Network Voyager for Ipso 4.0 Reference Guide 355
Clustering
Configuring Ospf
356
Stub Area Parameters
Configuring Ospf Areas and Global Settings
Ospf Area Configuration Parameters
Nokia Network Voyager for Ipso 4.0 Reference Guide 357
Nssa Not So Stubby Area Parameters
358
To configure a virtual link
Configuring Virtual Links
To configure Ospf
Nokia Network Voyager for Ipso 4.0 Reference Guide 359
Configuring Global Settings
360
Global Settings for Ospf
Nokia Network Voyager for Ipso 4.0 Reference Guide 361
Configuration Parameters for Ospf Interfaces
Configuring Ospf Interfaces
362
To configure an Ospf interface
Nokia Network Voyager for Ipso 4.0 Reference Guide 363
Configuring Ospf Example
364
Network Mask
Nokia Network Voyager for Ipso 4.0 Reference Guide 365
Auto Summarization
Virtual IP Address Support for Vrrp
366
RIP 1 Configuration Options Available from Network Voyager
Configuring RIP
To configure RIP
Nokia Network Voyager for Ipso 4.0 Reference Guide 367
Configuring RIP Timers
368
Enabling RIP 1 on an Interface
Configuring Auto-Summarization
RIP Example
Nokia Network Voyager for Ipso 4.0 Reference Guide 369
Enabling RIP 2 on an Interface
370
PIM Dense-Mode
Configuring Virtual IP Support for Vrrp
PIM Support for IP Clustering
Nokia Network Voyager for Ipso 4.0 Reference Guide 371
PIM Sparse-Mode
372
PIM and Check Point SecureXL
Configuring Dense-Mode PIM
Configuring Check Point VPN-1 Pro/Express
Nokia Network Voyager for Ipso 4.0 Reference Guide 373
Disabling PIM
374
Setting Advanced Options for Dense-Mode PIM Optional
Nokia Network Voyager for Ipso 4.0 Reference Guide 375
Configuring Sparse-Mode PIM
376
Configuring High-Availability Mode
Nokia Network Voyager for Ipso 4.0 Reference Guide 377
378
Nokia Network Voyager for Ipso 4.0 Reference Guide 379
Configuring a PIM-SM Static Rendezvous Point
380
Setting Advanced Options for Sparse-Mode PIM Optional
Nokia Network Voyager for Ipso 4.0 Reference Guide 381
382
Debugging PIM
Command Shows
Nokia Network Voyager for Ipso 4.0 Reference Guide 383
To log information about errors and events
384
Igrp
Nokia Network Voyager for Ipso 4.0 Reference Guide 385
386
Generation of Exterior Routes
Nokia Network Voyager for Ipso 4.0 Reference Guide 387
Igrp Aggregation
Configuring Igrp
Aliased Interfaces
388
Igrp Example
To enable Igrp on an interface
Nokia Network Voyager for Ipso 4.0 Reference Guide 389
Dvmrp
390
Configuring Dvmrp Timers
Configuring Dvmrp
Nokia Network Voyager for Ipso 4.0 Reference Guide 391
Igmp
392
Configuring Igmp
Nokia Network Voyager for Ipso 4.0 Reference Guide 393
Static Routes
394
To setting the rank for static routes
To configure a default or static route
Nokia Network Voyager for Ipso 4.0 Reference Guide 395
To add and configure many static routes at the same time
396
Adding and Managing Static Routes Example
To create a static default route
To create a static route non-default
Creating/Removing Static Routes
To create a backup static route
Backup Static Routes
To disable a static route
Route Aggregation
To remove aggregate routes
To create aggregate routes
Nokia Network Voyager for Ipso 4.0 Reference Guide 399
Route Aggregation Example
400
Rank Assignments
Preference Default
Route Rank
Nokia Network Voyager for Ipso 4.0 Reference Guide 401
To set route rank
Routing Protocol Rank Example
402
Support for BGP-4++
To configure the routing preferences
Nokia Network Voyager for Ipso 4.0 Reference Guide 403
BGP Path Attributes
BGP Sessions Internal and External
404
Nokia Network Voyager for Ipso 4.0 Reference Guide 405
Path Attribute Definition
BGP Interactions with IGPs
BGP Multi-Exit Discriminator
406
Communities
Inbound BGP Route Filters
Redistributing Routes to BGP
Nokia Network Voyager for Ipso 4.0 Reference Guide 407
408
Route Reflection
Community attribute Description
Confederations
Nokia Network Voyager for Ipso 4.0 Reference Guide 409
Ebgp Multihop Support
410
Route Dampening
TCP MD5 Authentication
Nokia Network Voyager for Ipso 4.0 Reference Guide 411
BGP Support for Virtual IP for Vrrp
412
Tables
BGP Support for IP Clustering
BGP Memory Requirements
Nokia Network Voyager for Ipso 4.0 Reference Guide 413
Example
Memory Size
414
BGP Neighbors Example
To configure Ibgp on Nokia Platform a
Nokia Network Voyager for Ipso 4.0 Reference Guide 415
To configure Ibgp on Nokia Platform C
To configure Ibgp on Nokia Platform B
416
To configure Ebgp on Nokia Platform D
To configure Ebgp on Nokia Platform a
To configure Ebgp on Nokia Platform C
Nokia Network Voyager for Ipso 4.0 Reference Guide 417
Verification
To configuring Ebgp on Nokia Platform E
Path Filtering Based on Communities Example
418
BGP Multi Exit Discriminator Example
To configure Default MED for Nokia Platform D
Nokia Network Voyager for Ipso 4.0 Reference Guide 419
To configure MED Values for all peers of AS200
420
Changing the Local Preference Value Example
Nokia Network Voyager for Ipso 4.0 Reference Guide 421
To set the local preference value for an Ibgp peer
To configure an Ibgp peer for Nokia Platform B
To configure the static routes required for an Ibgp session
422
BGP Confederation Example
Configuring Nokia Platform C
Nokia Network Voyager for Ipso 4.0 Reference Guide 423
Configuring Platform B
424
Nokia Network Voyager for Ipso 4.0 Reference Guide 425
Route Reflector Example
Configuring Platform B as Route Reflector
426
Configuring Platform D as Ibgp Peer of Platform B
Configuring Platform C as Ibgp Peer of Platform B
Nokia Network Voyager for Ipso 4.0 Reference Guide 427
BGP Community Example
Configuring BGP Route Inbound Policy on Platform B
Configuring Redistribution of BGP Routes on Platform B
428
Follow the steps in the Redistributing Ospf to BGP Example
Nokia Network Voyager for Ipso 4.0 Reference Guide 429
Configuring a Static Route on Platform a
Configuring a Loopback Address on Platform a
Configuring a Loopback Address on Platform B
Ebgp Load Balancing Example Scenario #1
Configuring an Ebgp Peer on Platform B
Configuring a Static Route on Platform B
Configuring an Ebgp Peer on Platform a
Nokia Network Voyager for Ipso 4.0 Reference Guide 431
Ebgp Load Balancing Example Scenario #2
Configuring Ospf on Platform a
Configuring Ospf on Platform B
432
Adjusting BGP Timers Example
Nokia Network Voyager for Ipso 4.0 Reference Guide 433
Configuring BGP Route Redistribution on Nokia Platform B
TCP MD5 Authentication Example
Configuring TCP MD5 Authentication on Nokia Platform a
434
BGP Route Dampening Example
Field Default value Units of measurement
Nokia Network Voyager for Ipso 4.0 Reference Guide 435
BGP-4++ Example
BGP Path Selection
436
To configure configure a BGP4 session over IPv6 transport
Nokia Network Voyager for Ipso 4.0 Reference Guide 437
Route Redistribution
438
Nokia Network Voyager for Ipso 4.0 Reference Guide 439
BGP Route Redistribution Example
To configure BGP route redistribution on Nokia Platform D
Redistributing Routes to RIP and Igrp
To redistribute a single route
Redistributing RIP to Ospf Example
Nokia Network Voyager for Ipso 4.0 Reference Guide 441
442
Redistributing Ospf to BGP Example
Nokia Network Voyager for Ipso 4.0 Reference Guide 443
To redistribute Ospf to BGP through Nokia Platform a
Redistributing Routes with Ospf
444
Inbound Route Filters
To configure IGP inbound filters
Nokia Network Voyager for Ipso 4.0 Reference Guide 445
BGP Route Inbound Policy Example
446
Nokia Network Voyager for Ipso 4.0 Reference Guide 447
Aspath Regular Expressions
BGP AS Path Filtering Example
448
Traffic Shaping Description
Traffic Management Overview
Packet Filtering Description
Nokia Network Voyager for Ipso 4.0 Reference Guide 449
Traffic Queuing Description
Configuring Access Control Lists
450
To apply or remove an ACL to or from an interface
To create or delete an ACL
Nokia Network Voyager for Ipso 4.0 Reference Guide 451
Configuring ACL Rules
452
To add a new rule to an ACL
Modifying a Rule
Nokia Network Voyager for Ipso 4.0 Reference Guide 453
ACL Rule Attributes
454
Configuring Aggregation Classes
Nokia Network Voyager for Ipso 4.0 Reference Guide 455
To associate an aggregation class with a rule
To create an Aggregation Class
456
Configuring Queue Classes
Nokia Network Voyager for Ipso 4.0 Reference Guide 457
To create or delete a queue class
To set or modify queue class configuration values
458
Create a QoS descriptor
Configuring ATM QoS
To associate a queue class with an interface
Nokia Network Voyager for Ipso 4.0 Reference Guide 459
To dissociate an ATM QoS Descriptor from an existing PVC
To delete an ATM QoS descriptor
460
Configuring Common Open Policy Server
Nokia Network Voyager for Ipso 4.0 Reference Guide 461
Configuring Security Parameters for a Cops Client ID
Configuring a Cops Client ID and Policy Decision Point
462
Assigning Roles to Specific Interfaces
Nokia Network Voyager for Ipso 4.0 Reference Guide 463
Deleting a Client ID
To disable and delete a Client ID
Activating and Deactivating the Cops Client
464
Example Rate Shaping
Nokia Network Voyager for Ipso 4.0 Reference Guide 465
Example Expedited Forwarding
466
Nokia Network Voyager for Ipso 4.0 Reference Guide 467
To test the configuration
468
BOOTP/DHCP Relay
Nokia Network Voyager for Ipso 4.0 Reference Guide 469
Bootp configuration parameters
Configuring BOOTP/DHCP Relay
To enable Bootp relay on an Interface
470
IP Broadcast Helper
To disable Bootp relay on an interface
IP Broadcast helper configuration parameters
Nokia Network Voyager for Ipso 4.0 Reference Guide 471
To configure IP broadcast helper
472
Router Discovery Overview
Configuring Router Discovery
Nokia Network Voyager for Ipso 4.0 Reference Guide 473
Router discover configuration parameters
To enable router discovery services
474
Network Time Protocol NTP
To disable router discovery services
Nokia Network Voyager for Ipso 4.0 Reference Guide 475
To configure NTP
Configuring NTP
476
Nokia Network Voyager for Ipso 4.0 Reference Guide 477
478
CPU-Memory Live Utilization
Viewing System Utilization Statistics
Nokia Network Voyager for Ipso 4.0 Reference Guide 479
Monitoring Process Utilization
Disk and Swap Space
480
Nokia Network Voyager for Ipso 4.0 Reference Guide 481
Ipso Process Management
Process Description
482
Generating Monitor Reports
Reports
Report Description
To display reports
Monitoring System Health
Nokia Network Voyager for Ipso 4.0 Reference Guide 483
Monitoring System Logs
484
Viewing Cluster Status and Members
Nokia Network Voyager for Ipso 4.0 Reference Guide 485
Displaying the Kernel Forwarding Table
Displaying Route Settings
Viewing Routing Protocol Information
486
Hardware Monitoring
Displaying Interface Settings
Nokia Network Voyager for Ipso 4.0 Reference Guide 487
To display routing daemon status using iclid
Using the iclid Tool
Iclid Commands
488
Nokia Network Voyager for Ipso 4.0 Reference Guide 489
490
Nokia Network Voyager for Ipso 4.0 Reference Guide 491
492
Nokia Network Voyager for Ipso 4.0 Reference Guide 493
Preventing Full Log Buffers and Related Console Messages
494
If you are using FireWall-1 NG
If you are using FireWall-1
Nokia Network Voyager for Ipso 4.0 Reference Guide 495
496
Index
Nokia Network Voyager for Ipso 4.0 Reference Guide Index
Bios
CPU
DSA
Http
Httpd
Managing
NGX
Nssa
RIP
RSA
TACACS+
Deleting virtual router
Index
